$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json) Hash identifier: oQ+66ColOhYiPudEfOdSeNp+559ZlawjgORlauspj04= Subject key identifier: A5:3C:91:7F:BD:C4:8D:43:CB:BE:C0:62:41:9F:73:E4:C7:94:54:67 Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft Manifest number: 07C4 Signing time: Thu 24 Apr 2025 20:55:53 +0000 Manifest this update: Thu 24 Apr 2025 20:55:52 +0000 Manifest next update: Thu 01 May 2025 20:55:52 +0000 Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: zTvIpOhwA/LXUGwNyaX8tf1J+rtRm49qeECFHijBA3k=) 2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: T4mDZ210SpDVRfUxvUs173RpQ0D7OXBy/5JPPZDEJ78=) 3: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: 6wXXxuIxd9enMsyVcB9pxqsVVca0vy4SEk/LuQef8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Validity Not Before: Apr 24 20:55:52 2025 GMT Not After : May 1 20:55:52 2025 GMT Subject: CN=680aa559-3840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:86:55:6c:4b:98:90:0f:63:54:3b:24:61: 8d:cb:f8:68:07:55:d4:22:18:b6:55:88:cd:e1:75: 20:81:38:be:f6:ce:d5:83:6a:72:9c:0e:a0:07:3e: 20:b1:26:6c:f5:4c:49:15:36:b2:ea:25:34:55:7e: 41:b9:40:c2:9c:86:94:75:b6:dd:49:40:c1:a2:b4: 2c:37:88:2b:bb:bc:40:9c:a3:5d:7b:21:37:2c:a4: 1f:39:b7:7d:c9:95:6d:cf:c4:23:a5:20:62:10:e8: 9a:f4:ce:19:85:cc:2a:7c:a9:b6:f1:a4:eb:2b:4a: b7:77:eb:06:ed:4e:a6:3e:d6:4d:ea:16:a0:b1:af: 83:af:8e:1d:ef:3f:34:59:7f:a9:b8:31:b4:a8:58: a4:e1:1e:a2:bd:1e:c4:2d:22:08:49:c0:65:d8:90: 6a:54:b9:8b:76:7a:fa:0a:ab:f9:7f:7f:3a:b0:38: a7:99:25:73:ff:58:41:a8:29:2b:00:08:cd:61:a0: 92:ea:0d:7d:f3:3e:a5:09:50:57:17:ea:e3:ac:b0: 14:55:ae:d0:d1:dd:22:12:fd:60:b8:c1:d3:06:23: 9a:36:7c:5e:dc:ec:47:14:4e:b6:bc:e5:9a:87:b7: 7c:28:a9:70:52:b0:c6:25:97:0e:a9:00:e9:8d:27: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:91:7F:BD:C4:8D:43:CB:BE:C0:62:41:9F:73:E4:C7:94:54:67 X509v3 Authority Key Identifier: keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ff:c8:27:05:6d:89:74:d8:7b:64:a5:d9:eb:1d:8b:96:6c: 29:dc:d9:77:c5:7f:31:b7:42:a5:6a:e0:63:fa:16:3d:16:c3: 9b:8b:ad:53:f0:a7:7a:a3:b2:f8:3b:1b:bc:25:1a:83:4a:d6: d4:a6:2f:f4:c4:fa:86:8e:a4:67:3d:cb:b5:4c:04:cb:0d:18: 47:8d:02:09:86:4e:61:8c:ca:03:0c:06:af:e4:cb:4b:7c:a7: 49:a2:ca:c4:29:9b:c7:11:fb:6d:47:37:c4:24:ad:09:bd:9c: 55:70:47:df:8c:33:86:1c:ba:75:5c:b2:14:e0:74:de:35:84: 9a:0e:e1:93:8f:18:37:dc:91:30:65:16:bb:b3:e0:2d:6c:7d: ab:32:85:67:1a:94:24:ce:cd:25:0f:63:55:1b:50:a8:00:19: f0:a4:6e:2a:29:2f:f9:bd:90:d1:21:f2:31:7c:c0:8e:11:02: c4:23:dc:2e:34:74:8b:ef:28:d9:71:d4:e5:79:0c:b3:5e:33: 81:cd:e2:4f:f2:2c:5e:1f:5f:dd:46:d9:fd:80:28:73:9f:46: 21:d6:de:43:cb:4b:29:94:b7:4b:eb:30:23:13:8d:f6:08:27: 87:2a:45:43:31:a9:8e:60:13:7d:62:1a:9d:bc:78:f9:7d:ab: 2a:0c:c9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy RDQzRjYxQjcwHhcNMjUwNDI0MjA1NTUyWhcNMjUwNTAxMjA1NTUyWjAYMRYwFAYD VQQDEw02ODBhYTU1OS0zODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8SGVWxLmJAPY1Q7JGGNy/hoB1XUIhi2VYjN4XUggTi+9s7Vg2pynA6gBz4g sSZs9UxJFTay6iU0VX5BuUDCnIaUdbbdSUDBorQsN4gru7xAnKNdeyE3LKQfObd9 yZVtz8QjpSBiEOia9M4ZhcwqfKm28aTrK0q3d+sG7U6mPtZN6hagsa+Dr44d7z80 WX+puDG0qFik4R6ivR7ELSIIScBl2JBqVLmLdnr6Cqv5f386sDinmSVz/1hBqCkr AAjNYaCS6g198z6lCVBXF+rjrLAUVa7Q0d0iEv1guMHTBiOaNnxe3OxHFE62vOWa h7d8KKlwUrDGJZcOqQDpjSeoOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU8kX+9 xI1Dy77AYkGfc+THlFRnMB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5 WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/8gnBW2JdNh7ZKXZ6x2Llmwp3Nl3xX8xt0KlauBj+hY9FsObi61T 8Kd6o7L4Oxu8JRqDStbUpi/0xPqGjqRnPcu1TATLDRhHjQIJhk5hjMoDDAav5MtL fKdJosrEKZvHEfttRzfEJK0JvZxVcEffjDOGHLp1XLIU4HTeNYSaDuGTjxg33JEw ZRa7s+AtbH2rMoVnGpQkzs0lD2NVG1CoABnwpG4qKS/5vZDRIfIxfMCOEQLEI9wu NHSL7yjZcdTleQyzXjOBzeJP8ixeH1/dRtn9gChzn0Yh1t5Dy0splLdL6zAjE432 CCeHKkVDMamOYBN9YhqdvHj5fasqDMlf -----END CERTIFICATE-----Generated at Sat Apr 26 03:26:51 2025 by rpki-client